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TRANSFORMING THE NAS: THE NEXT GENERATION AIR TRAFFIC 

CONTROL SYSTEM* 


Heinz Erzberger 
Ames Research Center 


SUMMARY 


The next-generation air-traffic control system will have to be able to handle, safely and efficiently, a 
traffic density that will be two or three times that accommodated by the present system. Capacity of 
the en route and transition (arrival/departure) airspace of the present system is principally limited by 
the controller workload associated with monitoring and controlling aircraft separation. Therefore, 
the key to achieving a large increase in the capacity of this airspace is a reduction in controller 
workload, which can be accomplished by automating the monitoring and control of separation and 
by using an air-ground data link to send trajectories directly between ground-based and airborne 
computers. In the proposed next-generation system design, the Advanced Airspace Concept (AAC), 
computer logic on the ground monitors aircraft separations and uplinks modified trajectories when 
potential conflicts between aircraft develop. During flight, pilots can downlink requests for 
trajectory changes to the ground system; their requests are revised by the ground system only as 
necessary to eliminate possible conflicts and to comply with other control system restrictions. If 
adapted to approach control, the system could increase landing rates by 25%. An AAC system 
architecture, consisting of software and hardware components on the ground and onboard aircraft, is 
defined. A separation-assurance system, which activates in the event of a failure in the primary 
ground-based system, is an essential element of the AAC. It is recommended that there be a phased 
transition from the present air-traffic control system to the AAC in order to minimize risks and to 
begin realizing the benefits of the AAC as soon as possible. Results from a safety analysis indicate 
the potential for the system to reduce the collision risk substantially compared to that of the current 
system. 


*Portions of this report were presented at ICAS-2004, August 30, 2004, in Yokahama, Japan. 
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1. INTRODUCTION 


The next-generation air traffic control system must be designed to safely and efficiently 
accommodate the large growth of traffic expected in the near future. It should be sufficiently 
scalable to contend with the factor of 2 or more increase in demand expected by the year 2020. 
Analysis has shown that the current method of controlling air traffic cannot be scaled up to provide 
such levels of capacity. 

The capacity of en route airspace, if constrained only by legally required separation criteria, has 
been shown in a preliminary study (ref. 1) to be several times greater than the capacity achieved by 
the current method of control. Controller workload associated with monitoring and controlling 
separation is known to be the primary constraint that limits the capacity of an airspace sector. The 
maximum number of aircraft a controller can safely monitor in a sector is approximately 15. Until 
recently, the strategy for gaining capacity without exceeding this limit has been to subdivide and 
redesign sectors. However, that strategy has reached the point of diminishing returns in high-density 
traffic regions such as the Northeast Corridor of the United States. It is not practical, for example, to 
reduce the size of a sector below the minimum size a controller needs in which to maneuver aircraft. 
Furthermore, reducing sector size also increases the controller’s intersector coordination workload, 
which diminishes the benefits of reducing sector size. Another approach to increasing airspace 
capacity is to provide controllers with decision support tools. Although such tools may offer small 
gains they fall far short of being able to double the capacity. 

Therefore, to achieve a large increase in capacity while also giving pilots increased freedom to 
optimize their flight trajectories requires a fundamental change in the way air traffic is controlled. 
The key to achieving a factor of 2 or more increase in airspace capacity is to automate separation 
monitoring and control and to use an air-ground data link to send trajectories and clearances directly 
between ground-based and airborne systems. In addition to increasing capacity and offering greater 
flexibility in the selection of trajectories, this approach also has the potential to increase safety by 
reducing controller and pilot errors that occur in routine monitoring and voice communication tasks. 

Pilots of appropriately equipped aircraft operating in airspace under control of this new system will 
have greatly increased freedom to downlink trajectory change requests to the ground system. 
Aircraft in the sector will be able to request and receive trajectory changes concurrently, since the 
ground-based computer logic ensures that all uplinked trajectories will be mutually conflict-free. 
Relieved of routine monitoring and control tasks, controllers will be able to devote more time to 
solving strategic control problems, managing traffic flows during changing weather conditions and 
handling other unusual events. Controllers will still assume separation assurance responsibilities for 
an aircraft in the event it loses its data link or requires manual handling as a result of on-board 
system failures. In addition to the redundant fail-safe separation-assurance logic on the ground, 
aircraft will be further protected against collisions by the on-board traffic alert and collision 
avoidance system (TCAS), as they are today. 

A candidate system, the Advanced Airspace Concept (AAC) (refs. 2-3), which is intended to meet 
the performance requirements described above, has been under study at NASA Ames Research 
Center. Although the AAC makes fundamental changes in the roles and responsibilities of 
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controllers, it also retains the ground system as the core of the air traffic control process. Moreover, 
its ground-based elements are compatible with and are complementary to the FAA’s planned 
modernization of the ground-system infrastructure. 

The AAC can also be viewed as a platform for transforming controller-dependent decision support 
tools designed for the current operational paradigm into autonomous (controller-independent) 
control processes. Without the constraints imposed by controller workload, the decision and control 
processes driving these tools can be optimized to achieve their full potential for increasing capacity 
and efficiency. Decision support tools for control of arrival traffic are important candidates for 
transformation into autonomous functions within the AAC platform. 

The design of the AAC system, described in this paper for en route airspace, can also be adapted to 
terminal-area control. By combining automated separation assurance with uplinked approach 
trajectories for precise control of final approach spacing, it is expected that the runway landing rate 
can be increased by about 25% with current separation standards. 

The FAA’s current plan for upgrades to air traffic services does not include giving permission to the 
future ground system to issue separation-critical clearances or trajectory changes autonomously to 
aircraft via data link without explicit approval of a controller, as is proposed herein (ref. 4). If further 
research can convincingly demonstrate the operational feasibility, safety, and performance benefits 
of the concept, the FAA and the air traffic users will have to decide if this capability should be 
included in the future air traffic service system and, if so, when it should be inaugurated. 

A proposed architecture for the AAC, comprising software and hardware components on the ground 
and on board aircraft, and an initial concept of operations are described in this paper. 


2. ARCHITECTURE AND ELEMENTS OF ADVANCED AIRSPACE CONCEPT 


Figure 1 shows the major elements of the AAC and the information flow between elements. The 
elements consist of the following: 

• Aircraft equipped with data link receivers/transmitters such as VDL (VHF data link version 2 
or higher), Controller Pilot Data Link Communications system (CPDLC) and associated 
interfaces that permit pilots to send to and receive from ground-based computers trajectories 
and other air traffic control (ATC) messages. Unequipped aircraft are defined as those 
without a data link. 

• Data link receivers/transmitters on the ground for exchanging trajectories between ground 
computers and equipped aircraft. An Automated Trajectory Server (ATS) on the ground for 
analyzing downlinked trajectories and generating conflict-free trajectories for uplinking to 
equipped aircraft. 

• A backup system for short term detection and resolution of conflicts referred to as the 
Tactical Separation Assured Flight Environment (TSAFE). 
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Figure 1. System Architecture of AAC. 


• An up-to-date database of currently assigned conflict-free trajectories and flight plans for all 
aircraft in the sector. 

• A controller display and controller-computer interfaces with ATS, TSAFE and data link 
information. 

It is assumed that the AAC ground-based elements would be incorporated into the Federal Aviation 
Administration’s (FAA) planned replacement for the current host computer complex. This 
replacement system is known as En Route Automation Modernization (ERAM), which the FAA 
plans to deploy in about 2010. The VHF data link version 2 or 3 (VDL-2 or -3) has sufficient 
bandwidth to support initial AAC operations. However, a priority message management system on 
the ground will be required to ensure that time-critical messages, such as near term conflict 
resolutions, are delivered to aircraft within a specified time period. In addition, a data link based on 
Mode S is assumed to be available as a low data rate, but high reliability, backup in the event of a 
VDL failure. 

The message set developed for the Controller Pilot Data Link Communications (CPDLC) system 
(ref. 5) is sufficient for specifying and exchanging flight plans as well as three-dimensional 
trajectories between the ground and aircraft in an initial version of this concept. A standard voice 
link provides controller-pilot communications with unequipped aircraft; it can also be used to 
communicate with equipped aircraft when necessary. 


4 






3. AUTOMATED TRAJECTORY SERVER 


The ATS is the workhorse of the AAC and is also its most complex software element. It generates 
trajectories that are conflict-free for up to 20 minutes, as measured from the current time. The ATS 
includes a conflict detection function, which periodically performs a conflict search of all aircraft 
operating in the airspace controlled by the system. The conflict detection search cycle is typically 
synchronized with the radar (or other available sensor) update cycle. 

When this function detects a conflict (predicted loss of legally required separation) within about 20 
minutes (but not less than 1 minute) from the current time, the ATS will attempt to generate a 
strategic resolution trajectory that is conflict-free and that also meets other traffic management 
constraints. Thus, a strategic resolution trajectory resolves the primary conflict; it is free of 
secondary conflicts, and includes a trajectory segment for recapturing the original flight plan at a 
downstream waypoint that is efficient for both the aircraft and ATC. The scenario shown in fig- 
ure 2(a) gives an example of a strategic resolution trajectory. Although the resolution trajectories 
may extend a long distance down range, terminating at waypoints near the destination airport, they 
are typically planned to be conflict-free for only the first 10-20 minutes, measured from the time 
instant they are generated. Because of the complexity of a particular traffic situation a new 
resolution trajectory may occasionally be conflict-free for as short as only 5 minutes. Such a short 
duration is close to the lower limit of acceptability, but it would occur infrequently. Once the 
resolution trajectory has been computed it is sent to the aircraft via data link. The next step in the 
process is for the pilot to downlink a “Will comply” message to the ground system, acknowledging 
that the trajectory has been received and that it will be executed as specified. If the pilot downlinks 
this message within the specified response time, the ATS ratifies the trajectory change process by 
updating the flight plan database. All the steps involved in replacing a trajectory should normally be 
completed in less than 2 minutes. However, a faster turnaround time would be required if loss of 
separation is less than 2 minutes away. In general the up-linked resolution trajectory will include an 
urgency indicator that will rise to the highest level as the time to loss of separation counts down to 
less than two minutes. (Figure 2(b) is discussed later, in the TSAFE section.) 

Flight crews can also access the ATS via their onboard data links and use it to revise their currently 
planned trajectories. For example, a pilot may want to change cruising altitude or the route of flight 
in order to avoid turbulence or to improve flight efficiency. The steps involved in this process are 
similar to the ATS-initiated conflict resolution situation. The ATS checks the pilot-requested 
trajectory for conflicts and violations of traffic management constraints. If no conflicts or violations 
are detected, the ATS sends a message to the aircraft approving the request. However, if the ATS 
does detect violations, it will generate a minimally modified replacement trajectory when possible. 
The pilot then has the option of accepting or rejecting the modified trajectory. He can also select and 
then downlink another trial trajectory. Thus, a series of trial requests by the pilot and responses by 
the ATS can ensue that terminate either when the pilot accepts an ATS modified trajectory or when 
he rejects all options offered. If he rejects all options, he agrees to continue flying the original 
(unmodified) trajectory. 
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(a) Strategic (ATS) 

•Conflict prediction range: up to 20 min. 
•Resolution initiated >1 min to loss of sep. (LOS) 
•Conflict free range: Up to 20 min 
•Includes segment to recapture flight plan 


(b) Tactical (TSAFE) 

•Loss of separation prediction range: 3 min 
•Resolution initiated <1 min to LOS 
•Conflict free range: Up to 4 min 
•No segment to recapture flight plan 



Figure 2. Characteristics of tactical and strategic resolutions. 


Finally, the controller also has access to the ATS using an interactive tool referred to as trial planner 
(refs. 6-7). Situations can arise when a controller needs to plan new trajectories for an individual 
aircraft or for a set of aircraft. For example, the controller may wish to replan the flow of traffic 
around a weather system or issue clearances via voice link to aircraft that have lost their data link. 
Since both pilots and controllers can independently and concurrently engage in interactive sessions 
with the ATS, it is essential for the maintenance of a conflict-free environment that the controller 
submit all trajectory change requests to the ATS through the trial planner tool. Using this tool, 
controller-initiated trajectory changes are handled in the same way as ATS or pilot-initiated changes. 
ATS evaluates the controller-requested changes for conflicts and traffic management constraints. 
When all constraints have been met, the controller can direct the ATS to uplink the changed 
trajectories to the subject aircraft. Finally, after the pilot has downlinked a “Will comply” message, 
the ATS will update the flight plan database with the new trajectory and signal to the controller that 
this action has taken place. 

The key to the operational integrity of this concept is for the ATS to ensure that the trajectories 
stored in the flight plan database are always up to date and that they remain free of conflicts and 
other constraint violations for some minimum time interval. An interval of 5 minutes, starting at the 
current time, establishes the lower bound, with 10 minutes being a more typical interval. The safety 
of operations under this concept depends on the ATS continuously monitoring the conflict status of 
all trajectories in the database and ensuring that resolution trajectories are uplinked well before any 
aircraft’s conflict-free time-to-go has counted down to less than one minute before loss of separation 
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(LOS). Of equal importance is the requirement that every trajectory change, whether initiated by the 
pilot or the controller, must not take effect until the ATS has approved the change. 

The trajectories provided by the ATS must solve the principal kinds of air traffic control problems 
encountered in different regions of the airspace. For example, the problems encountered in en route 
airspace differ from those encountered in arrival and departure airspace. Therefore, the task of 
building the ATS can be undertaken by dividing it into several subtasks. AAC operations will be 
limited to regions of airspace in which the problem solving ability of the ATS has reached a 
specified standard. 

Work is in progress to specify the algorithms and to write the prototype software for generating the 
resolution trajectories required in en route airspace. This work builds upon an extensive set of 
algorithms and legacy software previously developed for the Conflict Probe and Direct-To tools 
(refs. 6-7). These tools are integrated into the Center-TRACON Automation System (CTAS) (ref. 8). 

A special subset of the ATS will provide trajectories required for control of arrival and departure 
traffic at high capacity hub airports. These kinds of trajectories are conceptually and algorithmically 
similar to those generated in decision support tools for controllers. The tools for these applications 
include: (1) the En Route Descent Advisor (EDA) (ref. 9) for sequencing and spacing traffic to an 
arrival gate; (2) the Final Approach Spacing Tool (FAST) (ref. 10) for sequencing and spacing 
traffic to one or more runways; and (3) the Expedite Departure Planner (EDP) (ref. 11) for advising 
pilots on reaching cruise altitudes efficiently. These tools are also integrated into the CTAS software 
suite of decision support tools. Although these tools are designed to output advisories to controllers, 
the advisories themselves are actually derived from four-dimensional (4-D) trajectories that are 
conflict-free solutions to the traffic control problems defined above. Therefore, the 4-D trajectory 
generation software developed for these tools can be adapted for use in the ATS. Instead of 
controllers having to issue advisories that the tools obtain by simplifying the 4-D trajectories, the 
ATS will uplink the complete 4-D trajectories, which flight crews can download into their onboard 
flight management computers. This approach enabled by the AAC should significantly increase 
flight efficiency, air traffic control performance and controller productivity. 


4. TSAFE 


TSAFE (Tactical Separation Assured Flight Environment) plays the role of a backup system to the 
Automated Trajectory Server. If the ATS could be designed so that it would never fail to detect 
conflicts and to provide resolution trajectories in a timely manner, TSAFE would, of course, be 
unnecessary and therefore superfluous in the architecture of the AAC. There are, however, practical 
reasons why the ATS as a stand-alone system cannot be made reliable enough to guarantee that there 
will be no loss of proper separation. In its mature state the ATS software will most likely contain 
more than a million lines of code; for that software to be used as an autonomous agent in a safety- 
critical application, both its reliability and its operational limitations would have to be rigorously 
established. That process is not feasible for a code as large and complex as the ATS code. The 
approach taken here is to resolve this problem by inserting a redundant element, TSAFE, into the 
ground-based architecture. TSAFE thus duplicates a limited set of safety-critical functions of the 
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ATS, and thereby comprises a design that trades off the ATS’s complex functionality with its 
undeterminable reliability for a limited functionality with high reliability. Its code and algorithms 
will be structured to lend themselves to the rigorous verification and validation procedures required 
for certification of safety-critical applications. 

As shown in figure 1, TSAFE operates in parallel with the ATS. Both receive surveillance data, and 
both can exchange data with aircraft via data link. However, because TSAFE’ s functionality focuses 
exclusively on preventing loss of separation for short-term predicted conflicts, its software design 
will be far simpler than that of the ATS. 

Like ATS, TSAFE contains both conflict detection and resolution functions. However, these 
functions are limited to a time horizon of only 3-4 minutes. The horizon for the detection function is 
similar to that of Conflict Alert, which has been in operation at air traffic control facilities for many 
years. 

The conflict detection function in TSAFE uses a multi-trajectory analysis technique that can detect 
conflicts missed by Conflict Alert or by long-range conflict detection. In this technique two kinds of 
predicted trajectories are generated for each aircraft: dead reckoning (DR) and flight plan intent (FP) 
trajectories. Dead reckoning trajectories use an aircraft’s current position and velocity to project its 
future location. They are similar to the types of trajectories used in Conflict Alert. Flight plan intent 
trajectories, on the other hand, are the basis for strategic, or long time-horizon, conflict probing. In 
addition to an aircraft’s route of flight, FP trajectories use climb and descent performance and 
atmospheric models to compute predicted 4-D trajectories. The methods used to compute FP 
trajectories for the Conflict Probe and Direct-To tools in CTAS are described in references 12 
and 13. TSAFE uses both kinds of trajectories for each aircraft in searching for conflicts within a 
time horizon of 3 minutes. Thus, TSAFE searches for conflicts along the four pairs of trajectories 
formed by choosing the four combinations of dead reckoning and flight plan trajectories for each 
aircraft. The four pairs formed are therefore DR versus DR, FP versus FP, DR versus FP, and FP 
versus DR trajectories. Each pair searched can result in a detected conflict. In order to avoid false 
alerts in the conflict detection process, DR trajectories are normally truncated at points where they 
extend past an assigned altitude toward which an aircraft is climbing/descending or past a waypoint 
where an aircraft will turn to capture a new route segment. An exception to the truncation rule is 
made for critical maneuvers conflicts, which are explained later in this section. 

Figure 3 illustrates the four combinations of trajectory pairs that can arise in this method. Playback 
of recorded air traffic tracking and flight plan data containing incidences of loss of separation has 
shown that the multi-trajectory search procedure provides more complete identification of potential 
conflicts than any single trajectory search procedure can. This approach was developed to help avoid 
the ambiguity that is often encountered in deciding which one of the two types of trajectories to use 
in the detection process. It avoids the inevitable compromise of having to select a single trajectory 
when either trajectory could reasonably occur. In effect, the multi -trajectory approach makes it 
possible to unify short and long-range detection seamlessly in a single system. Furthermore, the 
search along the pair of dissimilar trajectory types DR versus FP and FP versus DR used in the 
multi-trajectory method detects a class of conflicts found neither by Conflict Alert nor by conflict 
probing. The multi-trajectory search is especially effective in finding conflicts when aircraft are 
climbing or descending or when they are flying off their flight plan routes. The method can also 
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Dead Reckoning (DR) vs. DR 
Detection range: 4 min. 



Flight Plan (FP) vs. FP 

Detection range: 20 min. if both A/C are 



FP vs. DR 



A/C A climbing to assigned altitude; 
descending A/C B failed to level out at 
assigned altitude 


DR vs. FP 

Detection range: 4 min. 



A/C A off F.P. and on a vector; A/C B on F.P. 


Figure 3. Multi-trajectory conflict detection. 


provide an alert to an impending conflict that will occur as soon as an aircraft begins executing a 
recently issued flight plan or altitude amendment while continuing to search for and identify 
conflicts along the current flight direction. 

Figure 4 shows two examples in this category of conflict prediction. In figure 4(a), an aircraft has 
received a clearance to a newly assigned altitude at time t c . However, the pilot’s initiation time of the 
altitude change maneuver cannot be precisely predicted and can be delayed by several minutes. To 
account for this uncertainty both the DR and the predicted climb trajectories are used in conflict 
detection. The two trajectories are refreshed at every radar track update (about every 12 seconds). 
Although the difference between the two trajectories will diminish after the aircraft begins its climb, 
both trajectories are still needed to protect against unexpected or unmodeled deviations from 
nominal climb profiles. For example, pilots will occasionally deviate from their standard climb or 
descent profiles when encountering turbulence. 

The scenario shown in figure 4(b) illustrates the trajectory prediction problem after the pilot has 
been issued a discretionary descent clearance at time t d . When issued this kind of descent clearance 
the pilot has the freedom to choose the top of the descent point and the descent profile but has to 
meet the constraint of crossing an arrival feeder fix at a specified position and altitude. As shown in 
the figure, the descent angle of the trajectory that is required to meet the feeder gate crossing 
restriction continues to change with position and does not freeze until the pilot initiates the descent. 
The start time of the descent can vary by up to 5 minutes and is unknown to TSAFE. Thus, the dual 
trajectory-detection method is especially important in this case. 
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Change in assigned altitude 
issued at time t c 



(a) Search along DR and planned 
climb trajectories 


Pilot discretionary descent to feeder gate 
crossing altitude issued at time td 


Actual start of descent 



(b) Search along DR and discretionary 
descent trajectories 



A/C B 


(c) Critical maneuver conflict 

results if A fails to level out at ha 


Figure 4. Detecting conflicts during clearance execution. 


Aircraft executing turning maneuvers pose several difficult problems in conflict detection. First it is 
necessary to detect the start of the turn as accurately as possible. Accurate detection is made difficult 
by the relatively slow position update rate as well as by errors in the Center radar surveillance 
system. Another problem arises because the final heading that marks the end of the turn is often 
unknown. Although the controller may know the final heading toward which the aircraft is turning, 
this type of intent information is often not available in the host computer where it could be accessed 
by TSAFE. A multi-trajectory method has been developed to improve the prediction of conflicts 
while an aircraft is turning. The details of the solution can be found in the Appendix. 

In these and similar situations, the ambiguity in the trajectories the aircraft could fly cannot be 
resolved until the start of the maneuver has been detected or, in the case of an aircraft in a turn, until 
the aircraft terminates the turn maneuver. If the search detects more than one conflict for an aircraft, 
the conflict pair with the earliest time to LOS is given priority. Although multi-trajectory conflict 
search is inherently susceptible to a higher false alert rate, false alerts have not been found to pose a 
significant problem during the short 3 min. time-horizon in which the method is used. The increased 
protection against missed conflicts achieved by this method is essential to ensure the safety of 
operations controlled by a highly automated ground system even at the cost of a somewhat higher 
false alert rate. 
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TSAFE also alerts to certain non-conflict situations referred to as critical maneuvers (refs. 2-3). 
These situations identify precursor conditions that can lead rapidly to high-risk conflicts if an 
aircraft, which is currently executing a transition maneuver, such as changing altitude, does not 
terminate the maneuver when the termination state is reached; these situations can occur either in the 
horizontal or vertical plane and are referred to as critical maneuver conflicts. Figure 4(c) illustrates 
the critical maneuver concept in the vertical plane. In the scenario shown, aircraft A is descending 
toward an assigned altitude, ha. Aircraft B is flying level at one flight level below A and is on a 
trajectory that would result in an immediate loss of separation if A should fail to level out when it 
reaches ha. TSAFE computes a FP trajectory consisting of a descent segment to ha that is followed 
by a level flight segment starting at ha. TSAFE also computes a DR trajectory, which is allowed to 
extend to altitudes below ha as the aircraft approaches the leveling-out altitude, ha. If the DR 
trajectory of A extending below ha yields a conflict with B, as shown in figure 4(c), a critical 
maneuver conflict has been found. Alerts for critical maneuver conflicts can be shown to controllers 
on their displays or sent to pilots via data link to help ensure that transition maneuvers are completed 
accurately. Critical maneuver conflicts are given a separate classification since they are not actual 
predicted conflicts. Analysis and replay of actual LOS incidents in en route airspace shows that 
some of the severest conflicts were preceded by critical maneuver conflicts. These conflicts are often 
caused by communication errors between controllers and pilots. It is the genesis of these incidents 
and the desire to prevent them that led to the formulation of the critical maneuver concept. In 
addition to enhancing the safety of AAC operations, this new type of alert can be incorporated into 
Conflict Alert to enhance the safety of the current system. 

Developmental software for TSAFE has been written and inserted into CTAS, allowing its 
performance to be evaluated using recorded or live input data. By replaying archived tracking data 
of actual cases of loss of separation in the software, it was found that TSAFE would have predicted 
the loss of separation earlier and with fewer missed alerts than Conflict Alert did under the same 
conditions. A report on this study is in preparation. The conflict detection methods in TSAFE could 
also be incorporated into the current system as a replacement for or enhancement of Conflict Alert. 

The set of conflicts detected by the conflict detection function is sent to TSAFE’ s conflict resolution 
function. By design, the resolutions generated in TSAFE are conflict-free for only about 4 minutes 
from the current time. They not only have a short conflict-free time range but also are limited 
primarily to only two possible maneuvers: (1) climb or descend to a specified altitude; and (2) turn 
right or left to a specified heading. A third type, speed change, may be used for special situations 
such as in-trail overtake conflicts. These limited kinds of resolutions are defined as tactical, whereas 
those generated by the ATS were previously defined as strategic. Figure 2(b) gives an example of a 
type 2 tactical resolution. As illustrated in the example, tactical resolutions are considered 
incomplete in that they lack a segment that returns the aircraft to the original flight plan. Tactical 
resolutions achieve the dual objective of avoiding imminent loss of separation while also providing a 
conflict-free time window of sufficient duration (4 minutes) during which the ATS can attempt to 
generate a strategic resolution. As long as the ATS remains operational (its software has not crashed) 
and is able to continue its search for a strategic resolution, the TSAFE resolution will be held in 
abeyance until the predicted time to LOS has counted down to a specified minimum time, which will 
likely be in the range of 1-2 minutes. Furthermore, TSAFE’ s tactical resolutions will be renewed 
periodically before they reach the end of their conflict-free time horizon, if ATS’s strategic 
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resolutions remain unavailable. It should be noted that the ATS must be made sufficiently robust so 
that TSAFE resolutions will occur infrequently. 


A crucial design issue will be the specification of criteria for mode switching between ATS and 
TSAFE. Because TSAFE is the last defense against loss of separation in the AAC, the conditions for 
switching to TSAFE will have to be carefully defined. 

As an element of a fail-operational system, TSAFE will run on independent computers and will not 
share software components with ATS, for which it is the primary safety net. Its narrowly 
circumscribed functionalities and performance objectives are intended to yield a software design that 
is significantly less complex than that of the ATS. A code count on the order of 20,000 lines is 
estimated for TSAFE. 


5. PILOT PROCEDURES AND AIRCRAFT EQUIPAGE 


Pilots flying appropriately equipped aircraft in AAC-enabled en route airspace will have 
substantially increased flexibility and opportunities to make changes in routing and assigned 
altitudes without having to request approval for such changes from controllers. As discussed in 
Section 3, pilots flying data- link-equipped aircraft in AAC airspace can connect into the ATS and 
trial-plan trajectory changes at any time. Although several pilots may be logged into the ATS 
simultaneously, they are guaranteed to receive mutually conflict-free trajectories. Since the 
controller is not an in-the-loop intermediary who receives and approves all change requests via voice 
communications, the number and frequency of change requests are not limited by controller 
workload as they are today. 

For initial AAC operations the Controller-Pilot Data Link Communication (CPDLC) (ref. 5) system 
interfaced with Flight Management Computers is thought to provide sufficient onboard capabilities 
for exchanging trajectories with the ground system. Several airlines have begun to equip their 
aircraft with these systems. Therefore, it is an important attribute of the AAC that airlines and other 
airspace users will not have to install additional onboard equipment in order to benefit from AAC 
services. However, the required ground-based elements, namely ATS and TSAFE, still have to be 
designed and developed. 

The elimination of the controller workload bottleneck becomes especially important during periods 
of convective weather when many pilots may wish to modify their routes and altitudes almost at the 
same time in order to avoid flying through rapidly moving convection cells. An example of such a 
situation is illustrated in figure 5, which shows traffic flying into a region of convective weather 
activity. The weather fronts shown are similar to those recorded a few years ago in the Eastern 
United States. When encountering such weather, controllers may shut down a large block of airspace 
to all traffic in the area of the front, causing major air traffic delays. The combined north-south range 
of these fronts is about 400 miles. In the situation illustrated, the pilots of the two aircraft heading 
for these fronts have both logged into the ATS to plan changes in routes in order to avoid flying 
through the heaviest convection areas. Both pilots have downlinked their requests for new routes, 
shown as dashed lines, that take them through the narrow region between the two fronts at nearly the 
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same time. The trajectory analysis engine in the ATS finds the two requested routes in conflict with 
each other as well as with that of a third aircraft east of the weather front. The ATS changes the 
requested routes just enough to eliminate the conflicts while still avoiding the convection cells. In 
actual practice several other aircraft may also be in the area attempting to revise their routes. The 
ATS will have the computational capacity to handle trajectory change requests from many aircraft 
simultaneously. 

In addition to ensuring that the approved trajectories returned to the aircraft are conflict-free for at 
least 10 minutes, the ATS also checks that the number of flights funneling through the narrow area 
between the cells does not exceed the capacity of the airspace. A capacity limit is needed to ensure 
that traffic can be handled safely in the event several aircraft in the area should unexpectedly deviate 
from their routes and create multiple short time-horizon conflicts. Although the capacity of AAC- 
enabled airspace is expected to be two to three times higher than the current capacity, situations can 
occur, as illustrated here, when traffic flows converge unexpectedly and create the risk that the 
capacity will be exceeded in a small subset of a large region of airspace. Thus, ensuring that the 
traffic density remains within the capacity limit is essential for safety in the AAC enabled airspace. 
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After the approved trajectories have been uplinked and accepted by the respective aircraft, the ATS 
will update the flight plan database and monitor the track conformance of the aircraft with respect to 
the new trajectories. 

It should be noted that if the AAC is to achieve the high capacity discussed above, aircraft must be 
equipped with 4-D flight management systems. These systems will have the ability to track specified 
trajectories during climbs, descents, and turns with substantially fewer errors than is possible with 
today’s flight management systems. However, AAC operations are feasible with current navigation 
and guidance equipment standards, although at a capacity well below the level that can be achieved 
with higher standards. 


6. TRANSITIONAL STEPS TOWARD AAC OPERATIONS 


It is not likely that a paradigm-shifting change in air traffic control, such as that represented by the 
AAC, can be accomplished by switching from the old to the new system in a single step at a chosen 
date. In light of the significant change that controllers will experience in their roles and 
responsibilities, it is essential to plan for a stepwise transition to AAC operations. Initial steps, if 
properly planned, will reduce risk, build confidence in the concept, and allow airspace users to gain 
early benefits. Furthermore, if users experience the predicted benefits, they will actively contribute 
to the process of bringing the more advanced and beneficial features into operational use. 

One method of risk reduction in introducing AAC operations is to initially limit the kind and the 
start time of flight plan changes the pilot can obtain from the ATS. For example, trajectory changes 
uplinked to the aircraft by the ATS could be constrained to start no earlier than about 6 minutes from 
the current time. Such a delay places the start of the trajectory change outside the controller’s 
tactical separation monitoring and control time-horizon. A controller could therefore continue to be 
responsible for separating traffic manually without experiencing undesirable interference with his 
control decisions. During the countdown period to the start of the trajectory change, the controller 
would be made aware of the impending change by an appropriate message displayed on the 
controller’s monitor. This delayed start will give the controller adequate time to cancel the change if 
he objects to it. An essentially equivalent approach to ensuring that the ATS trajectory change does 
not interfere with the controller’s tactical separation clearances is for the ATS to delay the start of 
the change until after the aircraft has been handed off to the next sector. Although this transition step 
would yield only small reductions in controller workload and little in capacity gains, it would, 
however, let pilots and controllers gain experience with the concept of autonomous and controller- 
independent trajectory services. 

A more significant transitional step will be the introduction of AAC operations to selected regions of 
airspace. At one or more Air Route Traffic Control Centers, AAC operations could be enabled in the 
entire airspace above a specified minimum altitude, for example above flight level 370. This 
airspace could be controlled as a single sector (referred to as a super-sector). Controllers would use 
current procedures to handle transitions to and from the AAC airspace. Tactical separation 
monitoring and control as well as strategic conflict resolution and pilot-directed trajectory planning 
would be performed by the AAC’s ground based elements ATS and TSAFE. This level of operations 
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would realize significant reductions in controller workload, an increase in airspace capacity and 
enhanced en route trajectory efficiencies. Access to this airspace would primarily be limited to 
CPDLC or equivalently equipped aircraft. Entry of unequipped aircraft into this airspace would be 
left to the discretion of the controller. 

The AAC also provides a platform for automating descent and arrival control. An important 
motivation for the research that originally led to the design of the AAC was the difficulty in building 
arrival control tools that controllers would accept. By uplinking the trajectories generated for time- 
based arrival metering and final approach spacing directly into an aircraft’s fight management 
computer, the AAC approach avoids controller workload issues that arise in manual delivery of 
advisories. Arrival metering under the control of the AAC will be feasible when a significant 
percentage of the airline fleet becomes equipped with CPDLC integrated with flight management 
computers. This is expected to occur by about 2012. In that time period the En Route Descent 
Advisor currently under development by NASA as a decision support tool for controllers will 
become a candidate for adaptation to the AAC. 

The final transition step would extend AAC operations to all altitude levels above 10,000 feet as 
well as to approach and departure corridors at selected hub airports. Procedural constraints could 
still be used to limit the type and timing of ATS-issued trajectories. For example, ATS authority 
could be restricted to certain types of trajectory changes, such as altitude changes only or route 
changes only. Another option is to give the sector controller the discretion to decide if or at what 
time to hand off an equipped aircraft to AAC control. In general, the characteristics of the traffic 
flow, the complexity of the control process, and the percentage of equipped aircraft will determine 
how much trajectory authority can be delegated to the AAC automation and how much the controller 
needs to retain in order to achieve the best balance of safety, efficiency and capacity. 

Table 1 compares the functionalities, equipage requirements, and performance of initial and mature 
AAC operations. The primary difference that distinguishes the two levels is the onboard equipage 
standard for guidance and navigation systems. The initial system requires only that aircraft be 
equipped with a CPDLC/VDL data link and standard navigation and guidance systems. The mature 
AAC requires the adoption of more precise trajectory specifications as well as 4-D guidance systems 
onboard the aircraft. Paielli has developed a trajectory specification method for this requirement 
using the Extensible Markup Language (XML), an international standard for passing structured 
information between computing systems (ref. 14). 

The FAA defines operational errors, referred to in Table 1, as violations of required separation 
standards for which controllers are held to be responsible. A reduction in error rate has been chosen 
here as a proxy for an increase in safety. It should be mentioned that the FAA has expressed concern 
over an increase in error rates in recent years. The 50% reduction in error rates given for the initial 
AAC is based on the improved performance of TSAFE compared to Conflict Alert as well as on the 
estimated reduction in communication errors obtained by using a data link. The greater reductions 
given for the mature AAC are based on results of the safety analysis described in the next section. 
Only the mature AAC realizes the AAC’s full potential for large increases in capacity, safety, and 
controller productivity. 
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TABLE 1. COMPARING CHARACTERISTICS OF INITIAL AND MATURE AAC. 


Functions/Performance 

Initial 

Mature 

Data link message protocols 

CPDLC message set 

CPDLC with XML extensions 

Trajectory specifications 

Conventional flight plans and 
clearances 

XML specified 4-D 
trajectories 

Guidance and navigation 
requirements 

Current standards and systems 

FMS with 4-D guidance 
capability 

Equipage types in AAC 
controlled airspace 

Mixed equipped and 
unequipped aircraft 

Predominantly equipped 
aircraft 

Controller productivity gains 
compared to current 

10-30% 

Over 100 % 

AAC sector design 

Moderately enlarged, similar 
to current design 

3-5 conventional sectors 
combined into one 

Capacity gains compared to 
current standards 

0-30% increase, depending on 
A/C equipage mix 

100%-200% increase 

Safety gains 

50% reduction in operational 
error rate 

90% reduction in operational 
error rate 


7. SAFETY ANALYSIS 


The primary consideration in designing the architecture of the AAC was to achieve the highest 
practical level of safety. Because of the high level of autonomous control authority delegated to the 
ground-based elements of the AAC, it was essential to design the architecture of the system so as to 
ensure the integrity and continuity of control following failure of critical software and hardware 
components. By identifying the kinds of faults that can occur during the operation of the system and 
determining how these faults influence collision risk, it is possible to estimate the overall safety of 
the system. Such a safety analysis using fault tree methodology has recently been conducted for the 
AAC (ref. 15). 

The analysis considers a mature AAC in which aircraft follow prescribed 4-D trajectories that are 
transmitted to them via datalink. Four general types of faults that could result in loss of separation 
between aircraft were defined: faults under nominal conditions, faults due to incorrect information 
received by the aircraft, faults due to inability of aircraft to follow instructions, and faults due to 
ground system service interruptions. Parameters for the quantitative analysis were derived from 
historical data supplemented where required by assumptions regarding the future ATM environment. 
The level of safety achieved by the AAC appears to be increased significantly by features such as 
secure transmission of trajectories via data link, timely uplinking of resolution trajectories when 
conflicts are detected, and extended conflict-free time horizons that allow the traffic in the AAC 
controlled airspace to coast through ground system service interruptions with low collision risk. 
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Further development and testing of the AAC system is required before a definitive statement can be 
made regarding achievable level of safety. However, preliminary results from the analysis yield a 
potential level of safety, as measured by expected time between collisions, which is significantly 
higher for the AAC than for the current system. Regulatory authorities will use these methods of 
analysis as part of the process for certifying that the AAC is safe for operational use. 


8. CONCLUDING REMARKS 


The proposed next-generation air traffic control system, the Advanced Airspace Concept (AAC), has 
the potential to accommodate a substantial increase in traffic by reducing the controller workload 
associated with tactical separation assurance tasks. The key technical approach behind the concept is 
a ground system that provides automated and autonomous trajectory services and an independent 
backup system for separation assurance for aircraft via data link. In AAC enabled airspace, 
controllers would not be responsible for separation assurance of appropriately equipped aircraft; 
instead they would perform strategic control tasks and manage failure conditions. Several basic 
systems required for the AAC are being developed independently for other applications. These 
include the CPDLC/VDL technologies and the FAA’s ERAM system. The two additional ground- 
based elements that are required for the AAC are the Automated Trajectory Server and the 
independent separation assurance system, TSAFE. Developmental software for these elements must 
be built and integrated into a test and evaluation system. Both simulations and field evaluations will 
be required in order to develop the final design specifications for the AAC. The transition from 
current to AAC operations can be planned in several steps that minimize risks while providing early 
benefits to airspace users. An initial quantitative analysis indicates that the mature AAC system has 
the potential to increase safety by substantially reducing the collision risk compared to that of the 
current system. 
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APPENDIX A 


CONFLICT DETECTION IN A TURN TO UNKNOWN HEADING 


Suppose that analysis of radar tracking data shows that an aircraft is in a turn. One possible 
explanation for the observed turn is that the aircraft is approaching a waypoint where a heading 
change is required to transition from one flight plan segment to another. This situation arises when 
an aircraft is following a flight plan route. A second possibility is that the aircraft is changing 
heading in response to a controller’s clearance to resolve a conflict or to space traffic in trail. A third 
possibility is that the pilot initiated the heading change to avoid a weather front. The controller may 
have approved the turn but usually does not enter the heading change into the host computer. A 
fourth possibility is that the aircraft is flying in a holding pattern. 

Heading change clearances, unlike altitude clearances, are seldom entered into the host computer by 
the controller. Therefore, it is generally not possible to infer reliably from analysis of radar tracking 
data and other information stored in the host computer which of the possibilities listed above gave 
rise to the turn and to what target heading the aircraft is turning. The lack of turn intent information 
increases trajectories prediction errors and therefore the probability of both missed and false alerts in 
the conflict detection process. 

The multi-trajectory method can be extended to provide improved detection of conflicts in turns 
under such conditions of uncertainty. At each track position where a turn has been detected, a set of 
possible final headings the aircraft could be turning toward is selected. Then the radius of the turn is 
estimated from observed turn rates and ground speeds. Using the estimated turn radius, a circular 
turn arc is constructed that begins at the current track position, is tangent to the current ground 
heading, and follows the direction of the turn, left or right as the case may be. Then points are 
determined along the circular arc such that the direction of lines tangent to the arc at these points 
correspond to the final headings of the set of possible headings. Thus, straight-line trajectories 
emanate from tangency points of the circular arc in the direction of headings included in the set of 
final headings. 

A fixed increment in heading can be used to generate the set of trajectories. The heading difference 
between adjacent straight-line trajectory segments must be chosen small enough to ensure that all 
conflicts are detected within a specified prediction range (typically not more than 3 minutes) 
regardless of the actual heading that the turning aircraft chooses to fly, up to the limit of the assumed 
heading change. 

Each of the trajectories generated for a heading in the set must be checked for conflicts against the 
trajectories of all other aircraft that could reach the conflict region. Therefore, the number of pairs of 
trajectories that must be checked for conflicts with this method will increase approximately in 
proportion to the number of final headings included in the set. Clearly, the number of final headings 
in the set should be kept as small as possible in order to limit the computations required for the 
conflict search. 
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The conflict detection method and the technique for checking the adequacy of a selected set of final 
headings are illustrated by the example shown in figure Al. In this example the heading increment 
was selected to be 30 degrees and the maximum heading change was assumed to be 180 degrees. 
Therefore, 7 trajectories are generated including the dead reckoning trajectory along the current 
heading direction. All trajectories terminate 3 minutes from the current track position. Lines 
connecting end points of the seven trajectories define the approximate locus of points where the 
turning aircraft could be found after 3 minutes of flight. Corresponding loci are also shown for 1 and 
3 minute prediction times. For a large set of trajectories (corresponding to a small heading 
increment) the locus of such points approaches the shape of a spiral. In order for a conflict not to be 
missed at the 3 minute prediction interval for any heading change aircraft A may make up to 180 
degrees, the distance between end points must be less than twice the required minimum separation. 
For a required separation of 5 nmi, the distance must therefore be less than 10 nmi. This condition is 
satisfied in the example, which is drawn approximately to scale for aircraft A flying at 400 knots. A 
shorter detection range can be used to reduce the number of trajectories in the set. Even a set with a 
single heading can be adequate for some situations. 


A/C A turning left toward unknown heading 
A/C B steady on course 



Figure Al. Conflict Detection in a Turn Using Multi-Trajectory Analysis 


It should be noted that the method is inherently susceptible to an increase in the rate of false alerts 
since any possible heading change within the protected range of headings can produce an alert. Only 
if the actual heading change (observed after the aircraft has completed the turn) approximates the 
heading change that produced the alert will the alert have predicted an actual conflict. The increased 
false alert rate is the price that must be paid for the uncertainty in the final heading. Nevertheless, it 
is thought that the improved protection against loss of separation when an aircraft is turning justifies 
the increase in the rate of false alerts. 
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Turn Transition Detector 


The timely and accurate detection of the onset and the termination of a turn is an essential 
prerequisite for conflict detection based on the multi-trajectory turn analysis method. Turns can be 
detected by analyzing successive radar returns for an aircraft. In general this process involves 
analyzing changes in ground heading between two or more successive radar position reports. The 
ground headings are computed from the vector formed by differencing successive radar positions. 

One difficulty in using successive ground headings to determine the turn status of an aircraft arises 
from the inaccuracies, also referred to as random noise, present in radar tracking data. The 
differencing of successive radar returns involved in heading computations amplifies the effect of the 
noise. That effect is amplified further by the need to compute the difference in the heading of 
successive returns, which is equivalent to estimating the second derivative of position. 

Another difficulty arises from the update rate of 12 seconds for track positions provided by the 
Center host computer. This update rate is too slow to accurately detect the exact time of transition 
from a straight and level flight condition to a turn. 

The traditional approach used to detect a signal, in this case a turn transition, in the presence of noise 
is by filtering the data. Kalman filters are often used for this purpose if the desired signal is 
generated by a dynamic system, as is the case here. Although such filters are effective in many 
applications, they have the unavoidable side effect of introducing delays in the desired output signal, 
which in this case is the determination of the onset of a turn. 

In order to achieve an acceptable balance between timely detection of a turn and effective 
suppression of false turn indications due to radar tracking errors, a special turn transition detector 
was designed. The design achieves better performance than a conventional filter by taking advantage 
of the fact that only three kinds of discrete events must be detected, not a continuous signal as a 
conventional filter does. 

Let P = (x ; ,y\) denote the track position update vector indexed by the integer i at each update time 
t i , (i = 1,2,3,- • ••) . The time difference At i = (r i - t t _ x ) between consecutive position updates is 
typically 12 sec for en route radars and 4.6 sec for terminal area radars. The ground heading ijr at t { 
can be computed from the following relation: 

ip, = tan -1 — — ( 1 ) 

y t ~ y t -i 

where ip i is measured clockwise from true North and is referred to as the back-differenced ground 
heading at t t . Similarly, the back differenced ground heading change Aip i at t j is 

A ' l Pi = ' l Pr' l Pi-v where A ip i > 0 denotes a right turn and Axp i < 0 denotes a left turn. Note that Atj) i 
depends on the 3 position updates at r ( ._ 2 ,r M and t r 
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Let </> ; represent the bank angle computed at update time , where by convention (p i > 0 is a right 
turn and (j) i < 0 is a left turn. For an aircraft flying at constant altitude, the relationship between A ip i 
and (f> i is given by 


(p i = tan 


^Pi x V gi 

gxAt t 


( 2 ) 


where g is the constant of gravity and V gi is the ground speed at . The ground speed is computed 
by filtering several back-differenced position updates. 

Let </> Mn represent the absolute value of the minimum bank angle that is required for an aircraft to be 
considered in a turn. Thus, for ~(p min < < (f) mm the aircraft is considered to be flying straight and 

level for the purposes of this analysis even though it may actually be flying in a shallow turn. The 
value assigned to (f) mm is determined empirically to yield the desired detection characteristics. 

At any time the detector is in one of three states: straight, right turn, or left turn. Upon receiving the 
track update at time t t the detector logic determines if the turn state should remain in its current state 
or change to one of the other two states. The general rule for a transition to occur at t t is for the bank 
angles computed by eq. (2) at two consecutive track update times t t _ x and t { to fall outside the bank 
angle limits established for the current state. The complete set of transition rules, specified in 
table Al, also include some additional conditions that have been found to enhance detection 
performance. One such condition specifies that an aircraft will remain in straight flight if two 
consecutive bank angles exceed <p mm but have opposite turn directions. This condition suppresses 
inappropriate transition to a turn when noise in the tracking data produces wide swings in the 
computed bank angle. Other conditions apply to transitions from turn to straight and from turn in 
one direction to a turn in the opposite direction. These transition rules were derived by analyzing 
actual tracking data that contained a variety of turn and straight flight segments. 

The circular turns generated in the multi-trajectory conflict detection method described in the 
preceding section require the input of a turn radius. The bank angles computed above for the turn 
detection analysis can be used to estimate the turn radius when the aircraft is in a turn state. The turn 
radius, R n at update time t t is given by the relation 


V 2 

R, = w 

g x tan <p : 

In order to reduce the effects of noise, a mean turn radius R i = (R._ x + R .)/ 2 is computed. Here, both 
radii in the expression for R i must be obtained from bank angles having the same direction of turn as 
the current turn state. If this is not the case at an update time r ; , the previous value of mean turn 
radius is retained. The estimate of the turn radius can be improved by using upper and lower bounds 
of the bank angle to establish corresponding lower and upper bounds on the values of the turn radius. 
Since detection of a turn requires the estimated bank angle to be greater than <j) mm , an upper bound 
on the turn radius can be determined by entering <p mm into eq. (3). Similarly, a lower bound on the 
turn radius can be established via eq. (3) by noting that passenger comfort constraints ordinarily 
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TABLE Al. TURN STATE TRANSITION RULES 



Key 

1 . The first point is always located in the 
region of the current turn state. 

2. An arbitrary value for 0 means any 
value in the range 

-90° < 0 < 90° 



Aifl 


0 

“Arin 
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limit the turn maneuvers of passenger aircraft to be flown at bank angles that are less than 
0max “ 45°. Bank angles that fall outside these limits are therefore set to their respective limits 
before being entered into eq. (3). 

The bank angle limit <p nmx is also used to detect excessive lateral position jumps in successive track 
updates. If |0,|>0 max , the track position at that update time is deleted and the transition detection 
process is suspended until the next update is received. This procedure has been found to improve 
detector performance by eliminating occasional outliers in the track positions. 

The performance of the detector will be illustrated by driving it with a track history recorded at an 
en route Center. The tack history, plotted in figure A2, contains both short and long turns, as well as 
sections of straight flight. Its duration is about 12 minutes. Each radar position update is indicated in 
the plot by a dot symbol. The periods of turns identified by the detector are labeled with the letters R 
(right turn) or L (left turn), which are located next to the appropriate track positions. Track position 
without co-located R’s or L’s indicate straight flight. A bullet symbol identifies the track update 
where the detector has identified the beginning of a new turn state. 

The bank angles computed by eq. (2) for this track history are shown in figure A3. The minimum 
bank angle for turn transition detection, (f ) mm , was chosen to be 13 degrees. The vertical lines 
indicate the track update times where a turn transition occurred. The letters S, R, L next to the 
vertical lines specify the turn type that begins at the corresponding track update time. The 
discontinuities in the bank angle often seen at adjacent track updates reflect the noisiness of the track 
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Figure A2. Turn detector performance for example track history with multiple turns. 
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Figure A3. Estimated bank angle for example track history. 


data. However, inspection of the bank angle history shows that the two-track update detection 
requirement has appropriately suppressed transition to several minor turns without excessively 
delaying the transition to the significant turns. 

Overall, for this example and for several others studied, the turns and the transition points identified 
by the detector closely match those a human observer would identify for the same track data. A 
human analyst must keep in mind that only the track records up to the current update time can be 
used in detecting a turn transition by visual inspection. Care must be taken not to let the track 
updates following the one corresponding to the current time influence the detection decision. The 
use of all track updates for detection without regard to real-time constraints is referred to as a 
posteriori processing, also known as post flight smoothing. It generally improves detector 
performance but is not feasible for real-time detection. 
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